{
  "uuid": "f08fb7b1-1b61-4871-8948-b69d734a8584",
  "domain": "microsoft-auth365.com",
  "algorithm_version": "corr-1.4.0",
  "generated_at": "2026-11-09T05:00:37.190288+00:00",
  "cluster": null,
  "count": 1,
  "limit": 10,
  "results": [
    {
      "uuid": "2d516c9f-42e1-4b0e-b332-8b9bae5eb1d0",
      "domain": "login.microsoft-auth365.com",
      "url": "https://login.microsoft-auth365.com",
      "company": "microsoft",
      "status": "active",
      "first_seen": "2026-11-08 17:21:05.329154+00:00",
      "relationship_score": 70,
      "evidence": [
        {
          "type": "apex_subdomain_overlap",
          "value": "microsoft-auth365.com",
          "contributed": 6.5
        },
        {
          "type": "same_asn",
          "value": "203273",
          "contributed": 0.0
        },
        {
          "type": "same_ip",
          "value": "82.148.248.112",
          "contributed": 14.3
        },
        {
          "type": "same_ns_set",
          "value": "ns1.nsaxis.com,ns2.nsaxis.com",
          "contributed": 9.2
        },
        {
          "type": "same_org",
          "value": "NetCrafters OU",
          "contributed": 0.0
        },
        {
          "type": "shared_distinctive_token",
          "value": "auth365",
          "contributed": 10.0
        },
        {
          "type": "domain_age_window",
          "value": "1d/1d",
          "contributed": 5
        },
        {
          "type": "same_registrar",
          "value": "Global Domain Group LLC",
          "contributed": 4
        },
        {
          "type": "temporal_24h",
          "value": "0.0h",
          "contributed": 6
        },
        {
          "type": "cert_age_window",
          "value": "1d/1d",
          "contributed": 3
        },
        {
          "type": "san_overlap",
          "value": "microsoft-auth365.com",
          "contributed": 12.0
        }
      ],
      "detail_url": "https://phishunt.io/suspicious/microsoft/2d516c9f-42e1-4b0e-b332-8b9bae5eb1d0/",
      "service_range": null,
      "url_only": false
    }
  ]
}